| 23752 | Serendipity serendipity_event_bbcode.php Script serendipity[charset] Parameter Local File Inclusion | medium |
| 23734 | WoltLab Burning Board Lite wbb_userid Parameter PHP Unset SQL Injection | medium |
| 23733 | WoltLab Burning Board Lite thread.php decode_cookie Function threadvisit Cookie Parameter SQL Injection | high |
| 23724 | Etomite CMS index.php id Parameter SQL Injection | medium |
| 23652 | ELOG Web LogBook global Denial of Service | medium |
| 23651 | Verity Ultraseek < 5.7 Multiple Vulnerabilities | critical |
| 23641 | MODx CMS base_path Parameter Remote File Inclusion | medium |
| 23640 | Exhibit Engine styles.php toroot Parameter Remote File Inclusion | medium |
| 23639 | IBM WebSphere snoopservlet Path Disclosure | medium |
| 23638 | IBM WebSphere Application Server '%20' Request Source Disclosure | medium |
| 23624 | e107 class2.php e107language_e107cookie Cookie Traversal Local File Inclusion | high |
| 22932 | PunBB include/common.php language Parameter Local File Inclusion | high |
| 22926 | miniBB bb_func_txt.php pathToFiles Parameter Remote File Inclusion | medium |
| 22922 | Segue CMS themesettings.inc.php themesdir Parameter Remote File Inclusion | high |
| 22903 | Novell eDirectory iMonitor HTTP Protocol Stack (httpstk) Host HTTP Header Remote Overflow | high |
| 22902 | Hosting Controller Multiple Script ForumID Parameter SQL Injection | high |
| 22901 | IronMail IronWebMail IM_FILE Identifier Encoded Traversal Arbitrary File Access | medium |
| 22900 | Ingo Foldername Arbitrary Command Execution | medium |
| 22899 | Horde Ingo Software Detection | info |
| 22876 | Cerberus Helpdesk rpc.php Arbitrary Ticket Information Disclosure | medium |
| 22874 | Open Conference System < 1.1.6 Multiple Script fullpath Parameter Remote File Inclusion | high |
| 22873 | phpMyConferences menus.inc.php lvc_include_dir Parameter Remote File Inclusion | medium |
| 22868 | Adobe Breeze Directory Traversal Arbitrary File Access | medium |
| 22867 | Web Site sitemap.xml File and Directory Disclosure | info |
| 22541 | BlueShoes lib/googlesearch/GoogleSearch.php APP[path][lib] Parameter Remote File Inclusion | medium |
| 22527 | Moodle 'index.php' 'tag' Parameter SQL Injection | medium |
| 22512 | phpMyAdmin < 2.9.1 Multiple Vulnerabilities | medium |
| 22509 | Mambo Open Source usercookie Parameter SQL Injection | medium |
| 22497 | HAMweather Template.php do_parse_code Function Arbitrary Code Execution | high |
| 22496 | OpenBiblio < 0.5.2 Multiple Scripts Local File Inclusion | high |
| 22480 | UBB.threads doeditconfig Arbitrary Command Injection | high |
| 22475 | DokuWiki fetch.php Multiple Parameter imconvert Function Arbitrary Command Execution | high |
| 22448 | CakePHP vendors.php file Parameter Traversal Arbitrary File Access | medium |
| 22413 | MyReview Admin.php email Parameter SQL Injection | high |
| 22412 | Exponent CMS index.php view Parameter Local File Inclusion | medium |
| 22409 | Claroline Software Detection | info |
| 22408 | Limbo com_fm Component sql.php classes_dir Parameter Remote File Inclusion | medium |
| 22368 | Site@School Multiple Script cmsdir Parameter Remote File Inclusion | high |
| 22367 | Limbo Contact Component (com_contact) contact.html.php contact_attach Unrestricted File Upload | high |
| 22366 | Dokeos claro_init_local.inc.php extAuthSource Parameter Array Remote File Inclusion | medium |
| 22365 | Claroline claro_init_local.inc.php extAuthSource[newUser] Parameter Remote File Inclusion | medium |
| 22364 | Moodle < 1.6.2 Multiple Vulnerabilities | high |
| 22362 | TWiki 'filename' Parameter Traversal Arbitrary File Access | medium |
| 22317 | RaidenHTTPD check.php SoftParserFileXml Parameter Remote File Inclusion | medium |
| 22316 | PHP-Fusion extract() Global Variable Overwriting | low |
| 22315 | DokuWiki doku.php X-FORWARDED-FOR HTTP Header Arbitrary Code Injection | high |
| 22310 | PmWiki < 2.1.21 Global Variables Overwriting | high |
| 22309 | SAP DB / MaxDB WebDBM Client Database Name Remote Overflow | critical |
| 22307 | Mailman Utils.py Spoofed Log Entry Injection | low |
| 22306 | WebAdmin < 3.2.6 MDaemon Account Hijacking | medium |
